$ rpki-client -vvf rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa File: FC28C1AE9BE011EC8EE90745C4F9AE02.roa (raw, json) Hash identifier: N8Z5+djN5CjXBtCFKd+fBabCsOPTDCpY/BSexlhMsOA= Subject key identifier: 61:ED:02:BF:F4:B9:27:A6:C5:C6:99:FA:8B:2F:35:85:1C:32:17:74 Certificate issuer: /CN=A91B005C/serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Certificate serial: 0620 Authority key identifier: 65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:52:22 +0000 ROA not before: Wed 02 Jul 2025 23:35:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 148993 IP address blocks: 103.169.160.0/23 maxlen: 24 2001:df0:7c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:51:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1568 (0x620) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B005C, serialNumber=6551B9BEA878181CFE96426157F4B121C0C5D5AC Validity Not Before: Jul 2 23:35:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40c56-7ebe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:8b:89:cd:39:0f:d7:f4:69:a9:2b:9b:7e:79: 3e:b4:a7:e8:fd:40:3d:a2:6c:9d:35:09:76:0f:23: cb:b9:fe:9c:6c:78:0d:ae:55:27:63:23:71:a5:fe: a6:09:fa:24:3d:a0:55:21:6e:38:bd:95:68:33:03: 7f:c8:e3:69:ae:ee:b9:4b:0b:a9:ec:ee:40:35:71: 81:4d:6a:24:6c:9c:77:0e:ac:8b:48:43:d5:f6:33: 3c:da:0d:29:1c:9e:03:54:85:de:12:ec:21:92:15: bc:76:06:55:8e:f3:b4:be:2b:c0:e8:83:e0:cd:58: 59:22:20:78:bf:49:72:4f:bd:73:b5:16:a6:ec:45: c6:b1:c6:52:1a:a7:70:9b:89:54:a0:15:9c:f0:7f: 43:a3:e4:a2:63:11:6c:20:c7:83:98:62:3c:57:b2: 39:49:f1:5e:31:6f:d3:f9:bf:a2:4a:84:b5:dc:93: 5f:f1:5d:1b:b2:a1:d0:45:10:25:b1:3d:fd:8b:4a: bc:ff:70:f8:36:9e:ad:7d:e0:f4:6b:94:5e:94:f3: bc:0c:aa:23:a2:6c:ab:fe:8a:97:13:96:d3:e6:7c: 48:1b:82:70:1a:ea:0c:cc:eb:90:f3:91:35:bc:5e: ba:1a:d1:3f:07:d6:55:84:23:39:17:81:56:34:e1: 6c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:ED:02:BF:F4:B9:27:A6:C5:C6:99:FA:8B:2F:35:85:1C:32:17:74 X509v3 Authority Key Identifier: keyid:65:51:B9:BE:A8:78:18:1C:FE:96:42:61:57:F4:B1:21:C0:C5:D5:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZVG5vqh4GBz-lkJhV_SxIcDF1aw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B005C/7C01C12EDEE411EB8286283BC4F9AE02/FC28C1AE9BE011EC8EE90745C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.169.160.0/23 IPv6: 2001:df0:7c0::/48 Signature Algorithm: sha256WithRSAEncryption 92:02:17:c7:7b:64:f9:ac:e7:63:fc:c0:f6:fa:91:0e:b9:a1: 93:eb:fd:95:e9:57:3f:42:67:c6:99:9f:7c:ab:28:14:26:b8: 17:15:ef:76:cd:c3:97:26:f8:80:97:10:2f:1f:58:c0:62:bf: 5a:e7:b1:25:86:f2:cd:fd:a5:b8:26:54:a2:7b:a6:69:92:cc: 3e:68:50:05:e7:b3:cb:f8:04:da:fc:95:e0:81:40:5d:c1:70: 57:89:b0:1d:d5:d8:75:05:c5:50:4d:1e:cc:4d:52:f2:5d:8e: a2:3e:ba:c3:d3:ee:b9:8a:48:51:34:b8:7c:c5:15:5d:d5:35: 4a:20:71:1a:26:e7:61:98:aa:71:8a:b5:5b:6b:9f:7f:08:fb: 82:ac:ef:42:f2:41:2a:41:22:35:9c:94:42:ea:73:7c:13:e6: f4:06:5f:5c:d8:5d:3d:1d:bb:24:e7:d6:ac:05:e8:58:41:5a: 88:e6:48:0a:38:86:ff:74:54:57:d7:7c:e1:0e:bb:bf:ba:5d: 2b:2b:80:ef:af:d9:79:cb:77:f7:03:5b:9f:cb:36:ea:dd:35: e4:36:d3:d8:e4:de:c2:30:86:45:bc:b8:40:a5:8b:9b:07:12: 27:92:bc:b2:42:3f:61:e5:9b:9b:2e:08:9f:3d:b2:a5:40:e7: 26:ca:b8:29 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICBiAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAwNUMxMTAvBgNVBAUTKDY1NTFCOUJFQTg3ODE4MUNGRTk2NDI2MTU3RjRCMTIx QzBDNUQ1QUMwHhcNMjUwNzAyMjMzNTUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGM1Ni03ZWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw4uJzTkP1/RpqSubfnk+tKfo/UA9omydNQl2DyPLuf6cbHgNrlUnYyNxpf6m CfokPaBVIW44vZVoMwN/yONpru65Swup7O5ANXGBTWokbJx3DqyLSEPV9jM82g0p HJ4DVIXeEuwhkhW8dgZVjvO0vivA6IPgzVhZIiB4v0lyT71ztRam7EXGscZSGqdw m4lUoBWc8H9Do+SiYxFsIMeDmGI8V7I5SfFeMW/T+b+iSoS13JNf8V0bsqHQRRAl sT39i0q8/3D4Np6tfeD0a5RelPO8DKojomyr/oqXE5bT5nxIG4JwGuoMzOuQ85E1 vF66GtE/B9ZVhCM5F4FWNOFs2wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFGHtAr/0 uSemxcaZ+osvNYUcMhd0MB8GA1UdIwQYMBaAFGVRub6oeBgc/pZCYVf0sSHAxdWs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDA1Qy83QzAxQzEyRURF RTQxMUVCODI4NjI4M0JDNEY5QUUwMi9aVkc1dnFoNEdCei1sa0poVl9TeEljREYx YXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pWRzV2cWg0R0J6LWxrSmhWX1N4SWNERjFhdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjAwNUMvN0MwMUMxMkVERUU0MTFFQjgyODYyODNCQzRGOUFFMDIvRkMyOEMxQUU5 QkUwMTFFQzhFRTkwNzQ1QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBZ6mgMA8EAgACMAkDBwAgAQ3wB8AwDQYJKoZIhvcNAQELBQADggEB AJICF8d7ZPms52P8wPb6kQ65oZPr/ZXpVz9CZ8aZn3yrKBQmuBcV73bNw5cm+ICX EC8fWMBiv1rnsSWG8s39pbgmVKJ7pmmSzD5oUAXns8v4BNr8leCBQF3BcFeJsB3V 2HUFxVBNHsxNUvJdjqI+usPT7rmKSFE0uHzFFV3VNUogcRom52GYqnGKtVtrn38I +4Ks70LyQSpBIjWclELqc3wT5vQGX1zYXT0duyTn1qwF6FhBWojmSAo4hv90VFfX fOEOu7+6XSsrgO+v2XnLd/cDW5/LNurdNeQ209jk3sIwhkW8uECli5sHEieSvLJC P2Hlm5suCJ89sqVA5ybKuCk= -----END CERTIFICATE-----Generated at Mon Mar 2 18:06:43 2026 by rpki-client